cred_dump_creds.c

Version: - FREEBSD - FREEBSD-13-STABLE - FREEBSD-13-0 - FREEBSD-12-STABLE - FREEBSD-12-0 - FREEBSD-11-STABLE - FREEBSD-11-0 - FREEBSD-10-STABLE - FREEBSD-10-0 - FREEBSD-9-STABLE - FREEBSD-9-0 - FREEBSD-8-STABLE - FREEBSD-8-0 - FREEBSD-7-STABLE - FREEBSD-7-0 - FREEBSD-6-STABLE - FREEBSD-6-0 - FREEBSD-5-STABLE - FREEBSD-5-0 - FREEBSD-4-STABLE - FREEBSD-3-STABLE - FREEBSD22 - l41 - OPENBSD - linux-2.6 - MK84 - PLAN9 - xnu-8792
SearchContext: - none - 3 - 10

    1 /* quick and dirty hack to grab all credentials in the cred hash table
    2  * from kernel via sysctl.
    3  * sysctl is only defined if xnu is built with DEBUG_CRED defined.
    4  */
    5 
    6 #include <stdio.h>
    7 #include <stdlib.h>
    8 #include <fcntl.h>
    9 #include <limits.h>
   10 #include <string.h>
   11 #include <errno.h>
   12 #include <unistd.h>
   13 #include <sys/stat.h>
   14 #include <sys/types.h>
   15 #include <sys/sysctl.h>
   16 #include <bsm/audit.h>
   17 
   18 /* bad!  this is replicated in kern_credential.c.  make sure they stay in sync!
   19  * Or better yet have commone header file?
   20  */
   21 struct debug_ucred {
   22         uint32_t        credp;
   23         uint32_t        cr_ref;                         /* reference count */
   24         uid_t           cr_uid;                         /* effective user id */
   25         uid_t           cr_ruid;                        /* real user id */
   26         uid_t           cr_svuid;                       /* saved user id */
   27         u_short         cr_ngroups;                     /* number of groups in advisory list */
   28         gid_t           cr_groups[NGROUPS];     /* advisory group list */
   29         gid_t           cr_rgid;                        /* real group id */
   30         gid_t           cr_svgid;                       /* saved group id */
   31         uid_t           cr_gmuid;                       /* UID for group membership purposes */
   32         struct auditinfo_addr cr_audit;                 /* user auditing data */
   33         uint32_t        cr_label;                       /* MACF label */
   34         int                     cr_flags;                       /* flags on credential */
   35 };
   36 typedef struct debug_ucred debug_ucred;
   37 
   38 void dump_cred_hash_table( debug_ucred * credp, size_t buf_size );
   39 void dump_cred( debug_ucred * credp );
   40 
   41 
   42 main( int argc, char *argv[] )
   43 {
   44         int                             err;
   45         size_t                  len;
   46         char                        *my_bufferp = NULL;
   47 
   48         /* get size of buffer we will need */
   49         len = 0;
   50         err = sysctlbyname( "kern.dump_creds", NULL, &len, NULL, 0 );
   51         if (err != 0) {
   52                 printf( "sysctl failed  \n" );
   53                 printf( "\terrno %d - \"%s\" \n", errno, strerror( errno ));
   54                 return;
   55         }
   56 
   57         /* get a buffer for our credentials.  need some spare room since table could have grown */
   58         my_bufferp = malloc( len );
   59         if (my_bufferp == NULL) {
   60                 printf( "malloc error %d - \"%s\" \n", errno, strerror( errno ));
   61                 return;
   62         }
   63         err = sysctlbyname( "kern.dump_creds", my_bufferp, &len, NULL, 0 );
   64         if (err != 0) {
   65                 printf( "sysctl 2 failed  \n" );
   66                 printf( "\terrno %d - \"%s\" \n", errno, strerror( errno ));
   67                 return;
   68         }
   69         dump_cred_hash_table((debug_ucred *)my_bufferp, len );
   70 
   71         return;
   72 }
   73 
   74 void
   75 dump_cred_hash_table( debug_ucred * credp, size_t buf_size )
   76 {
   77         int             i, my_count = (buf_size / sizeof(debug_ucred));
   78 
   79         printf("\n\t dumping credential hash table - total creds %d \n",
   80             my_count);
   81         for (i = 0; i < my_count; i++) {
   82                 printf("[%02d] ", i);
   83                 dump_cred( credp );
   84                 credp++;
   85         }
   86         return;
   87 }
   88 
   89 void
   90 dump_cred( debug_ucred * credp )
   91 {
   92         int             i;
   93         printf("%p ", credp->credp);
   94         printf("%lu ", credp->cr_ref);
   95         printf("%d ", credp->cr_uid);
   96         printf("%d ", credp->cr_ruid);
   97         printf("%d ", credp->cr_svuid);
   98         printf("%d g[", credp->cr_ngroups);
   99         for (i = 0; i < credp->cr_ngroups; i++) {
  100                 printf("%d", credp->cr_groups[i]);
  101                 if ((i + 1) < credp->cr_ngroups) {
  102                         printf(" ");
  103                 }
  104         }
  105         printf("] %d ", credp->cr_rgid);
  106         printf("%d ", credp->cr_svgid);
  107         printf("%d ", credp->cr_gmuid);
  108         printf("a[%d ", credp->cr_audit.ai_auid);
  109         printf("%d ", credp->cr_audit.ai_mask.am_success);
  110         printf("%d ", credp->cr_audit.ai_mask.am_failure);
  111         printf("%d ", credp->cr_audit.ai_termid.at_port);
  112         printf("%d ", credp->cr_audit.ai_termid.at_addr[0]);
  113         printf("%d ", credp->cr_audit.ai_asid);
  114         printf("] ");
  115         printf("%p ", credp->cr_label);
  116         printf("0x%08x \n", credp->cr_flags);
  117         printf("\n");
  118         return;
  119 }

Cache object: d1849c57822ce2b468cd920d4061a2fe

[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.

FreeBSD/Linux Kernel Cross Reference sys/tools/cred_dump_creds.c

FreeBSD/Linux Kernel Cross Reference
sys/tools/cred_dump_creds.c